Loading HuntDB...

GHSA-3hm6-rvrr-hc6r

GitHub Security Advisory

⚠ Unreviewed CRITICAL Has CVE

Advisory Details

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

Related CVEs

Key Information

GHSA ID
GHSA-3hm6-rvrr-hc6r
Published
January 26, 2024 3:30 AM
Last Modified
January 26, 2024 3:30 AM
CVSS Score
9.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 16, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.